Core Security Technologies has reported a vulnerability in ICQ Pro 2003b, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the "MCRegEx__Search()" function in the processing of messages with a certain type. This can be exploited to cause a heap-based buffer overflow by specifying an incorrect length value in a message sent to the client.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been reported in build 3916. Other versions may also be affected.

Secunia Security